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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1. (Currently Amended) A method for analyzing the root cause of system 
failures on one or more computers, comprising: 

generating an event when a computer system detects a system failure; 
determining the cause of the system failure; 

transmitting the event, including the determined cause, from the computer system to a 
central repository; 

analyzing the system failure event in the central repository; 

storing the event in a local repository located on the computer system; and 

synchronizing the local repository and the central repository, 

wherein the synchronizing step comprises: 

transmitting missing events in the central repository from the computer system^ 
wherein the missing events correspond to system failure events for which causes were 
still being determined bv the computer system at a time when the central repository made a 
request for event information to be sent thereto, and for which the causes have subsequently 
been determined by the computer system . 

2. (Original) The method of claim 1, further comprising: 

re-transmitting the event if a receipt confirmation message is not received from the 
central repository. 

3. (Canceled). 

4. (Previously Presented) The method of claim 1 , further comprising: 

holding the event in a queue if a receipt confirmation message is not received from the 
central repository; and 

re-transmitting the event in the queue after a period of time. 

5. (Original) The method of claim 1, further comprising: 

-2- 

WASH_1 873452.1 



Atty. Dkt. No. 100200514-1 
(084061-0278) 

determining if the system failure was due to a hardware problem by analyzing a file 

log. 

6. (Original) The method of claim 1, further comprising: 

determining if the system failure was due to a software problem by analyzing system 
core files. 

7. (Previously Presented) The method of claim 1 , fiuther comprising: 
assigning a sequence number to each event generated; 

receiving a status request fi-om the central repository; and 

synchronizing the local repository and the central repository if the sequence number 
does not match the expected sequence number. 

8. (Canceled). 

9. (Previously Presented) The method of claim 1, wherein the synchronizing step 
further comprises: 

transmitting missing events in the local repository fi-om the central repository. 

10. (Previously Presented) The method of claim 1, wherein the synchronizing step 
fiirther comprises: 

discarding events that have already been received. 

1 1 . (Original) The method of claim 1, fiirther comprising: 

retransmitting the information stored in the central repository to another computer 
system for fiirther analysis. 

12. (Currently Amended) An apparatus for analyzing the root cause of system 
failures on one or more computers, comprising: 

a network; 

a local support computer coupled to said network; 
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a computer system coupled to the network, the computer system programmed to 
monitor itself and another computer system for system failures, to determine the cause of the 
system failure, and to transmit system failure events to the local support computer; 

storing the event in a local repository located on the computer system; and 

synchronizing the local repository and a repository of the local support computer, 

wherein the synchronizing step comprises: 

transmitting missing events in the repository of the local support computer from the 
computer system^ 

wherein the missing events correspond to system failure events for which causes were 

still being determined by the computer system at a time when the repository of the local 
support computer made a request for event information to be sent thereto, and for which the 
causes have subsequently been determined by the computer system , 

1 3 . (Currently Amended) [ [An] ] The apparatus of claim 1 2, ftirther comprising: 

the local support computer programmed to collect and analyze the system failure 
information. 

1 4. (Currently Amended) [ [An] ] The apparatus of claim 1 2, further comprising: 

the computer system programmed to re-transmit the event if a receipt confirmation 
message is not received from the local support computer. 

15. (Canceled). 

1 6. (Currently Amended) [ [An] ] The apparatus of claim 1 2, further comprising: 

the computer system programmed to hold the event in a queue if a receipt 
confirmation message is not received from the central repository, and to re-transmit the event 
in the queue after a period of time, 

1 7. (Currently Amended) [ [An] ] The apparatus of claim 1 2, further comprising: 

the computer system progranmied to determine if the system failvire was due to a 
hardware problem by analyzing a file log. 
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18. (Currently Amended) [[An]] The apparatus of claim 12, further comprising: 

the computer system programmed to determine if the system failure was due to a 
software problem by analyzing system core files. 

19. (Currently Amended) [[An]] The apparatus of claim 14, further comprising: 

the computer system programmed to assign a sequence number to each event 
generated; 

the local support computer programmed to send a status request to the computer 
system, and to synchronize the local repository with the local support computer if the 
sequence number does not match the expected sequence number. 

20. (Currently Amended) [[An]] The apparatus of claim 12, further comprising: 

a remote support computer connectable to the local support computer for receiving 
system failure data firom the local support computer. 

21 . (Currently Amended) A means for analyzing the root cause of system failures 
on one or more computers, comprising: 

a means for transmitting data from one computer to another, 

a local support computer coupled to the means for transmitting data, 

a computer system coupled to the means for transmitting data, 

a means for the computer system to monitor itself or another computer system for 
system failures and determining the causes of the failures, 

a means for transmitting the causes of the failures to the local support computer; 

a local repository located on the computer system for storing the event; and 

a means for synchronizing the local repository and a repository of the local support 
computer, 

wherein the synchronizing means comprises: 

a means for transmitting missing events in the repository of the local support 
computer from the computer system^ 

wherein the missing events correspond to svstem failure events for which causes were 
still being determined by the computer svstem at a time when the repository of the local 
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support computer made a request for event information to be sent thereto, and for which the 
causes have subsequently been determined by the computer system . 

22. (Canceled). 

23. (Canceled). 

24. (Canceled), 

25. (Canceled). 

26. (New) The method of claim 1, wherein the central repository is in a SLEEP 
mode at all times other than when events are transmitted to the central repository from the 
computer system and analyzed by the central repository. 

27. (New) The apparatus of claim 12, wherein the central repository is in a 
SLEEP mode at all times other than when events are transmitted to the central repository 
from the computer system and analyzed by the centred repository. 

28. (New) The means of claim 21, wherein the central repository is in a SLEEP 
mode at all times other than when events are transmitted to the central repository from the 
computer system and analyzed by the central repository. 
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